$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft File: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft (raw, json) Hash identifier: rdpm0S4PzPkTS03AEaV9S7zy8IgVuh/SXe1cVPPchrE= Subject key identifier: E4:84:3E:91:E9:C1:78:2E:82:41:FC:65:FA:54:12:6A:9A:B9:1F:13 Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Certificate serial: 5924A8858223934CA8115E65F2E222FFC3D56C27 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft Manifest number: 25 Signing time: Thu 16 Apr 2026 08:43:09 +0000 Manifest this update: Thu 16 Apr 2026 08:38:09 +0000 Manifest next update: Fri 17 Apr 2026 09:55:09 +0000 Files and hashes: 1: AS0.roa (hash: BvQgF/OqmMaF0oD/Gh+P6gWfnSxEr9FEAszRlvbr0CI=) 2: AS18241.roa (hash: KghwJGsdAFwKKaHyAzU5cWOTx1CTSMYVyT97Iq5hIVw=) 3: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl (hash: zskki4OT/zcgNerUS9+ZFme4AzIAlJbmFz3iVgDax8M=) 4: AS9814.roa (hash: Fx0jP4aQ4pcOqireF4CpHMswJZljyUdoFx8vMnPRQjI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 09:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:24:a8:85:82:23:93:4c:a8:11:5e:65:f2:e2:22:ff:c3:d5:6c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Validity Not Before: Apr 16 08:38:09 2026 GMT Not After : Apr 17 09:55:09 2026 GMT Subject: CN=E4843E91E9C1782E8241FC65FA54126A9AB91F13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:69:06:fd:ce:a7:13:6a:04:56:7b:34:e6: b1:5a:36:82:b9:2a:1f:a8:26:66:92:18:95:75:0b: b2:fa:e0:b3:3b:a5:65:b8:4a:d9:60:a6:4c:b9:20: 9d:04:7e:db:4b:b6:90:6c:7e:20:ae:14:65:52:b5: f2:62:38:d0:20:ef:70:d2:e2:03:66:b0:61:db:bb: 27:78:5c:d0:68:54:82:a9:54:4d:08:dd:aa:9b:c7: 7a:9a:be:9f:19:67:f8:ff:79:00:ab:c1:d5:b0:0c: 0c:7a:fb:a6:e1:68:cd:70:19:f4:3f:26:56:49:7b: 5d:1c:9a:79:fe:a0:d2:1b:a1:66:02:da:2b:06:78: 3c:c2:5e:36:18:d3:5e:9f:7e:2a:73:b1:e5:fd:ca: 8d:44:3b:1e:e1:6e:fd:4c:50:e7:1c:3f:74:1e:7a: 1f:29:45:83:13:af:77:50:65:dd:ce:93:b3:b5:b1: 89:37:d3:4c:7f:b1:b8:a4:00:29:b6:05:11:b0:1f: e9:2c:81:b1:ae:07:d9:d4:30:d5:85:25:85:a7:ec: 99:06:3b:50:b5:88:9f:fa:7b:ae:d5:01:fc:e3:43: 14:4d:3c:0b:91:53:0c:a5:95:36:d9:c6:17:77:62: 36:3d:10:21:21:9c:78:0a:73:59:2e:01:9a:79:b6: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:84:3E:91:E9:C1:78:2E:82:41:FC:65:FA:54:12:6A:9A:B9:1F:13 X509v3 Authority Key Identifier: keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e4:21:37:ce:ac:c5:51:69:dc:c5:63:77:2b:4c:ab:2b:6b: 66:4e:14:70:a2:46:2b:1b:2e:cd:3e:89:5e:38:ba:ce:f1:eb: e6:f8:b8:a9:ba:99:fa:93:79:26:2f:e4:6a:99:a6:0d:c5:e6: 00:f3:04:2b:4b:fb:a7:eb:66:0d:be:a8:89:96:e2:ae:29:57: 28:93:cc:f8:a0:3b:87:80:7b:bf:9a:d6:4d:42:6e:39:e3:ce: 79:02:e1:f4:e3:8f:3c:61:75:76:2f:cc:7b:2b:66:23:eb:c6: 93:a0:4d:2f:c0:03:85:2a:2b:e6:47:36:53:23:c6:4a:3f:be: c1:5c:be:e8:fd:60:e9:ad:8f:19:72:25:be:11:8d:9d:9a:aa: ef:fa:3d:9b:c9:ee:2c:87:5e:12:e1:54:cb:00:96:f9:6f:72: 7c:5e:17:e9:0f:73:8c:a3:ca:1a:4f:f5:29:b1:ac:29:71:9b: 92:06:e1:c4:9d:07:39:79:55:75:a0:7f:fd:c4:80:7a:5d:53: c5:44:61:09:35:9a:74:7a:94:84:d4:b5:65:31:7f:46:9f:c8: c6:2c:e8:39:e7:02:a9:85:aa:b8:d7:25:68:71:7b:15:2c:1e: 8e:f9:ef:2d:3a:a4:3e:9d:8b:40:63:59:bd:10:00:61:37:27: cb:bf:66:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWSSohYIjk0yoEV5l8uIi/8PVbCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJB NjJBMkREODAeFw0yNjA0MTYwODM4MDlaFw0yNjA0MTcwOTU1MDlaMDMxMTAvBgNV BAMTKEU0ODQzRTkxRTlDMTc4MkU4MjQxRkM2NUZBNTQxMjZBOUFCOTFGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KmkG/c6nE2oEVns05rFaNoK5 Kh+oJmaSGJV1C7L64LM7pWW4Stlgpky5IJ0EfttLtpBsfiCuFGVStfJiONAg73DS 4gNmsGHbuyd4XNBoVIKpVE0I3aqbx3qavp8ZZ/j/eQCrwdWwDAx6+6bhaM1wGfQ/ JlZJe10cmnn+oNIboWYC2isGeDzCXjYY016ffipzseX9yo1EOx7hbv1MUOccP3Qe eh8pRYMTr3dQZd3Ok7O1sYk300x/sbikACm2BRGwH+ksgbGuB9nUMNWFJYWn7JkG O1C1iJ/6e67VAfzjQxRNPAuRUwyllTbZxhd3YjY9ECEhnHgKc1kuAZp5tvCZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5IQ+kenBeC6CQfxl+lQSapq5HxMwHwYDVR0j BBgwFoAUIeKnCwV4xnSwvx/XvrO5sqYqLdgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI0MTY2NjY5Nzg1NDk3OS8wLzIxRTJBNzBCMDU3OEM2NzRCMEJGMUZEN0JFQjNC OUIyQTYyQTJERDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJBNjJBMkREOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNDE2NjY2OTc4NTQ5NzkvMC8yMUUyQTcwQjA1NzhD Njc0QjBCRjFGRDdCRUIzQjlCMkE2MkEyREQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOQhN86sxVFp 3MVjdytMqytrZk4UcKJGKxsuzT6JXji6zvHr5vi4qbqZ+pN5Ji/kapmmDcXmAPME K0v7p+tmDb6oiZbirilXKJPM+KA7h4B7v5rWTUJuOePOeQLh9OOPPGF1di/Meytm I+vGk6BNL8ADhSor5kc2UyPGSj++wVy+6P1g6a2PGXIlvhGNnZqq7/o9m8nuLIde EuFUywCW+W9yfF4X6Q9zjKPKGk/1KbGsKXGbkgbhxJ0HOXlVdaB//cSAel1TxURh CTWadHqUhNS1ZTF/Rp/IxizoOecCqYWquNclaHF7FSwejvnvLTqkPp2LQGNZvRAA YTcny79mlw== -----END CERTIFICATE-----Generated at Thu Apr 16 23:53:01 2026 by rpki-client